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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below for the 
convenience of the Examiner. No claims have been amended. 

1 . (ALLOWED) A control system in communication with a host control system and 
having a download function, comprising: 

a first storage element storing execution program data to execute a control function in a 
rewritable status; 

a second storage element to store a download module including fresh pieces of update 
target execution program data and module identifying information; 

a first control unit to receive the download module encrypted in the host control system 
by an encryption key generated from the same program data as the execution program data 
stored in said first storage element and from the module identifying information, and to store the 
received download module in said second storage element; and 

a second control unit to decrypt the download module by an encryption key generated in 
the control system itself from the execution program data in said first storage element and from 
the module identifying information of the download module in said second storage element and 
to replace, when a storage start address, a data length and a check digit that are encrypted in 
the download module are decrypted into valid values in a plain text, the execution program data 
in said first storage element with the fresh execution program data decrypted. 

2. (ALLOWED) A control system having a download function according to claim 1 , 
further comprising a third control unit to control the control system to receive the download 
module including the fresh execution program data for a predetermined fixed period of time after 
starting the download function. 

3. (ALLOWED) A control system having a download function according to claim 2, 
further comprising a fourth control unit to control the control system to receive the download 
module including the fresh execution program data by restarting the download function when 
receiving a specified reset command in a state of being unable to receive the download module. 

4. (ALLOWED) A control system having a download function according to claim 2 or 
3, further comprising a third storage element to store a loader executed first when starting the 
download function, to store the download module in said second storage element and to execute 
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the execution program data for the control function that are stored in said first storage element. 

5. (ALLOWED) A control system having a download function according to claim 4, 
further comprising a fifth control unit controlling the control system to make the execution 
program data in said first storage element executable by the loader when a check digit value 
obtained as a result of calculation based on all pieces of data in the execution program data in 
said first storage element, is coincident with data in a specified address in the execution program 
data in said first storage element. 

6. (ALLOWED) A control system having a download function according to claim 5, 
further comprising a sixth control unit to store the execution program data, executable and 
stored in said first storage element, in said third storage element stored with the loader, and to 
restore the control function by storing said first storage element with the loader's own execution 
program data in said third storage element when judging that the execution program data can 
not be executed as a result of checking the execution program data in said first storage element 
upon a startup of the loader. 

7. (ALLOWED) A control system having a download function according to claim 5, 
further comprising a seventh control unit to enable the fresh execution program data to be stored 
by initializing said first storage element into a known status when judging that the execution 
program data can not be executed as a result of checking the execution program data in said 
first storage element upon a startup of the loader. 

8. (ALLOWED) A control system having a download function according to claim 6, 
further comprising an eighth control unit to set a queuing time till the loader's own execution 
program data are stored in said first storage element, and restricting a repetition of initializing 
said first storage element by the loader and storing said second storage element with the 
download module containing unlawful execution program data. 

9. (ALLOWED) A control system having a download function according to claim 7, 
further comprising a ninth control unit to set a queuing time till said first storage element is 
initialized by the loader, and restricting a repetition of initializing said first storage element by the 
loader and to store said second storage element with the download module containing unlawful 
execution program data. 
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1 0. (ALLOWED) A control system having a download function according to claim 1 , 
wherein the download module including a fixed-length header field stored with the module 
identifying information including at least a module name, a module creation date, a module 
version number and a storage start address, and at least one data field stored with a block 
length and data having a length corresponding to this block length, and 

there is encrypted a block having the data field including an actual data length 
corresponding to the execution program data, a storage start address, the execution program 
data, pad data for adjusting a data length to a cipherable length and a check digit generated 
from the above data. 

11. (CANCELLED) 

12. (ALLOWED) A download control method of a control system, comprising: 
storing a first storage element with execution program data for executing a control 

function in a rewritable status; 

storing a second storage element with a download module including fresh pieces of 
update target execution program data and module identifying information; 

receiving the download module encrypted in a host control system by an encryption key 
generated from the same program data as the execution program data stored in said first 
storage element and from the module identifying information, and storing the received download 
module in said second storage element; and 

decrypting the download module by an encryption key generated in the control system 
itself from the execution program data in said first storage element and from the module 
identifying information of the download module in said second storage element and replacing, 
when a storage start address, a data length and a check digit that are encrypted in the download 
module are decrypted into valid values in a plain text, the execution program data in said first 
storage element with the fresh execution program data decrypted. 

1 3. (ALLOWED) A download control method according to claim 1 2, further 
comprising controlling the control system to receive the download module including the fresh 
execution program data for only a predetermined fixed period of time after starting the download 
function. 
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14. (ALLOWED) A download control method according to claim 13, further 
comprising controlling the control system to receive the download module including the fresh 
execution program data by restarting the download function when receiving a specified reset 
command in a state of being unable to receive the download module. 

15. (ALLOWED) A download control method according to claim 13 or 14, further 
comprising executing first a loader stored in a third storage element, executing the download 
function by this loader, and executing the execution program data for the control function that are 
stored in said first storage element when it is normally ended to make the download module 
receivable by the download function. 

16. (ALLOWED) A download control method according to claim 15, further 
comprising making the execution program data in said first storage element executable by the 
loader when a check digit value obtained as a result of a calculation based on all pieces of data 
in the execution program data in said first storage element, is coincident with data in a specified 
address in the execution program data in said first storage element. 

1 7. (ALLOWED) A download control method according to claim 16, further 
comprising: 

storing the execution program data, executable and stored in said first storage element, 
in said third storage element stored with the loader; and 

restoring the control function by storing said first storage element with the loader's own 
execution program data in said third storage element when determining that the execution 
program data can not be executed as a result of checking the execution program data in said 
first storage element upon a startup of the loader. 

1 6. (ALLOWED) A download control method according to claim 16, further 
comprising enabling the fresh execution program data to be stored by initializing said first 
storage element into a known status when determining that the execution program data can not 
be executed as a result of checking the execution program data in said first storage element 
upon a startup of the loader. 

19. (ALLOWED) A download control method according to claim 17, further 
comprising setting a queuing time until the loader's own execution program data are stored in 
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said first storage element, and restricting a repetition of initializing said first storage element by 
the loader and storing said second storage element with the download module containing 
unlawful execution program data. 

20, (ALLOWED) A download control method according to claim 18, further 
comprising setting a queuing time until said first storage element is initialized by the loader, and 
restricting a repetition of initializing said first storage element by the loader and storing said 
second storage element with the download module containing unlawful execution program data. 

21 . (ALLOWED) A download control method according to claim 1 2, wherein the 
download module including a fixed-length header field stored with the module identifying 
information containing at least a module name, a module creation date, a module version 
number and a storage start address, and at least one data field stored with a block length and 
data having a length corresponding to this block length, and 

there is encrypted a block having the data field including an actual data length 
corresponding to the execution program data, a storage start address, the execution program 
data, pad data for adjusting a data length to a cipherable length and a check digit generated 
from the above data. 



22. (CANCELLED) 
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